# services which close self ports (e.g. WEBREPORT-866)
loadbase    ALL = NOPASSWD: /sbin/iptables *, /sbin/ip6tables *

# for yandex-search-ip-tunnel
loadbase        ALL=NOPASSWD: /sbin/ip -6 tunnel add ipip6-ext0 mode ipip6 remote*
loadbase        ALL=NOPASSWD: /sbin/ip -6 tunnel del ipip6-ext0
loadbase        ALL=NOPASSWD: /sbin/ip addr add * dev ipip6-ext0
loadbase        ALL=NOPASSWD: /sbin/ip link set dev ipip6-ext0*
loadbase        ALL=NOPASSWD: /sbin/ip route replace default dev ipip6-ext0
loadbase        ALL=NOPASSWD: /sbin/ip -6 addr add * dev veth
loadbase        ALL=NOPASSWD: /sbin/ip -6 addr del * dev veth
